Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a313033303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230393a313033303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          JilRJw/5gbcJ9Dco6wNS4wTI+oMwWzxNjx9m9iOqC38=
Subject key identifier:   95:DD:71:B4:C8:50:66:07:01:BC:6D:B3:9B:05:44:FB:F6:D4:9B:6D
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       7951CB74FA396ED7CC5137344FFCE5EF56F987C0
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a313033303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 09 Feb 2022 10:30:02 +0000
ROA not before:           Wed 09 Feb 2022 10:25:02 +0000
ROA not after:            Wed 08 Feb 2023 10:30:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:209:1030::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:51:cb:74:fa:39:6e:d7:cc:51:37:34:4f:fc:e5:ef:56:f9:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  9 10:25:02 2022 GMT
            Not After : Feb  8 10:30:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e5:b4:45:ee:30:a4:93:5f:27:0f:c2:84:a1:
                    ae:14:0d:e1:e9:48:33:4c:fd:2f:cd:80:fb:19:d2:
                    da:22:a7:b8:8c:18:8d:8c:1f:4c:6b:6f:6c:5a:cd:
                    25:21:65:b8:8e:f1:23:48:41:c2:b0:2c:65:62:8f:
                    ca:49:d9:57:e1:f4:52:98:6e:57:0e:0a:77:65:c4:
                    6c:f8:ba:fc:6d:03:dc:f5:a8:81:0d:fa:7f:5d:79:
                    d6:98:71:90:56:c8:d7:dd:77:d8:7a:2e:86:c3:54:
                    d4:85:d6:c1:c1:4e:33:70:96:2a:d7:8e:3e:5a:0e:
                    ed:dd:5c:3e:c4:31:b2:d6:d3:b4:a5:82:a9:eb:26:
                    90:aa:a0:2c:e4:dd:b3:33:b1:93:51:98:93:62:6e:
                    01:47:93:d1:c8:1b:c6:a0:3b:7d:ac:18:ee:79:65:
                    b9:2f:5a:e0:42:8b:42:1e:9a:35:dc:f2:7f:70:d1:
                    cb:2f:2a:99:8b:1b:87:ca:58:99:97:b6:d0:a0:df:
                    22:50:6c:ef:99:12:e7:a2:4d:af:24:ec:1e:ce:38:
                    e6:aa:dc:53:7c:65:5d:02:07:e7:5f:31:d3:52:b3:
                    88:39:1d:b4:69:85:04:90:d5:b1:95:9d:3a:aa:ce:
                    8c:4f:37:10:6d:e1:23:73:8a:d0:4d:b4:b2:93:e4:
                    5b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DD:71:B4:C8:50:66:07:01:BC:6D:B3:9B:05:44:FB:F6:D4:9B:6D
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a313033303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:209:1030::/80

    Signature Algorithm: sha256WithRSAEncryption
         6a:ac:c2:c6:db:4d:04:48:6a:42:39:f0:b5:62:ef:3c:8d:2d:
         7b:86:98:30:f7:49:70:8a:ed:b6:b2:73:53:fa:e6:64:c9:66:
         dc:a1:f2:5a:73:0b:08:44:50:4f:fc:3d:58:89:80:f7:51:20:
         14:63:22:d7:b1:ba:6c:2c:10:ea:f7:d8:ed:d6:3d:f9:1e:41:
         6a:0a:c3:64:7a:0e:7f:93:b4:17:f4:b3:58:48:ff:5e:a5:c1:
         27:55:3d:44:7d:6c:39:15:0e:01:5b:d7:ce:02:f2:24:62:d7:
         92:3e:40:a3:33:be:ea:33:c1:55:53:4e:6f:63:35:a4:ba:4c:
         2b:1b:8c:d1:e2:b5:16:8c:0d:e5:75:84:b3:c3:40:34:17:ca:
         2c:87:9d:2c:03:ff:14:f1:35:17:70:ae:80:ac:65:16:68:b6:
         e2:1e:f8:fc:8c:c9:35:25:f1:b7:20:64:9e:56:fd:f5:10:5c:
         9b:5a:53:38:8b:e8:28:cd:1e:23:3f:16:8b:10:99:5c:77:1f:
         ca:8a:32:28:b9:e5:fb:32:2d:44:8d:7d:bd:41:4f:b3:2d:20:
         fb:37:6f:2b:26:b4:81:cd:6e:19:5f:6a:50:31:27:1e:c2:70:
         41:b6:72:a4:4c:70:ed:7b:4c:4c:0c:18:4e:10:27:6f:d3:93:
         fa:19:92:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----